Framework library · Global standards

ISO/IEC 27001

ISO/IEC 27001:2022. Published by ISO/IEC, version 2022. Kapālins maps it at category level: the assessment’s 4 AI-risk areas, each tied to this framework, rather than clause by clause. 2 of 4 risk areas are proved by a live signal from the platform, and 2 by the assessment.

Read the source document

Risk areas mapped
LLM Security controlsLive signal
Agentic AI Risk controlsAssessment
Model Integrity & Supply Chain controlsAssessment
AI Governance & Risk Management controlsLive signal

Live signal: a signal from the gateway, probes or device sensor proves it continuously. Assessment: it is evidenced by answers to the assessment. Both are exported in the regulator evidence pack.

History

How ISO/IEC 27001 got here.

  1. Adopted

    ISO/IEC 27001:2005 published as the first edition of the information security management system standard. ISO

  2. Amended

    ISO/IEC 27001:2013 published as the second edition, replacing the 2005 edition. ISO

  3. Amended

    ISO/IEC 27001:2022 published as the third edition, the version currently in force. ISO

  4. Amended

    ISO/IEC 27001:2022/Amd 1:2024 published, adding climate action changes to the standard. ISO

See this framework on your estateAll 29 frameworks